Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa
File: 08faf29f-43ea-3741-adc8-4b04d7d43597.roa (raw, json)
Hash identifier: q5xvlinmM4gz9xbXZGOq1yTUand+U4hfA6wdUsSlF0o=
Subject key identifier: 07:45:1A:E9:8C:40:50:40:07:6F:E6:B2:54:A1:2B:0F:DE:F4:83:2D
Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial: 010D0C9F4328584845158FE99D9C543FE75C31E0
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 204.76.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8f:e9:9d:9c:54:3f:e7:5c:31:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=dcb86125-9e41-4fd0-9fc5-66c3da9ed446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:93:55:85:3b:be:79:fc:e0:d1:dd:0a:58:
b8:36:dc:b6:ab:b6:71:5d:08:a4:4b:3c:93:50:53:
1b:e2:a7:7b:7d:ba:56:75:58:2c:50:48:6a:61:ec:
2c:20:6d:22:07:37:5c:d0:16:25:4a:49:00:f5:eb:
b6:81:6c:89:ff:c3:ab:7c:ed:d2:09:d7:74:f2:a0:
a5:13:83:88:12:4c:d3:35:44:34:9e:74:00:16:4d:
ef:df:e1:0a:93:45:74:bd:67:5c:76:46:57:02:f2:
67:1e:d0:10:01:75:76:16:dd:2a:57:d0:5f:4b:fc:
0b:12:b7:73:98:82:d0:f2:99:86:4c:e6:4d:b1:33:
7e:1b:52:3a:1b:2d:5c:5b:f5:15:9c:cd:61:65:79:
81:93:94:e3:91:ff:e1:8c:d2:a3:96:50:10:6e:6c:
02:f6:92:50:6b:06:91:9d:e9:ee:d2:f4:62:56:28:
37:1a:a5:74:23:ac:48:23:ac:4f:85:4c:2d:43:09:
54:0a:dc:13:c2:5c:3a:29:02:a1:16:60:17:2c:b9:
54:77:7f:c3:aa:e0:f8:66:5e:51:01:53:9e:63:b5:
82:ec:3b:79:70:3a:16:6d:91:90:42:cf:c1:e1:c5:
24:3d:da:32:ba:fc:f6:5e:13:5b:51:4f:e3:a8:f8:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:1A:E9:8C:40:50:40:07:6F:E6:B2:54:A1:2B:0F:DE:F4:83:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
X509v3 Authority Key Identifier:
keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
sbgp-ipAddrBlock: critical
IPv4:
204.76.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:d5:99:e8:be:76:f1:94:47:0e:66:77:cd:b8:90:a8:22:a7:
07:74:28:de:cb:d1:e9:5e:4b:07:e6:27:06:16:74:31:44:5b:
d1:47:22:98:2b:2c:83:82:e0:b6:30:f2:af:8b:6f:b7:69:d7:
81:ce:a0:8c:2a:71:c8:8f:14:4e:2f:ce:80:be:81:80:92:c6:
bb:af:b5:f6:e7:2b:50:d2:b0:53:3b:d5:b7:ed:d8:ae:d8:c3:
c3:96:c8:09:31:e8:95:bb:32:1e:76:26:ca:37:1d:27:f5:0a:
1a:1a:21:11:5e:73:17:dc:94:d2:97:ce:e3:c8:65:6f:a8:63:
4a:03:34:07:8a:56:1b:55:47:ca:a4:05:08:c7:4c:f8:e2:86:
ec:21:38:5a:86:a0:28:43:00:63:94:78:c7:27:e2:94:5c:10:
75:7f:63:47:68:0c:21:59:73:91:53:e9:33:e8:b8:a8:eb:e6:
c6:3c:01:1b:18:0a:49:b1:98:13:dd:ea:28:89:ff:40:4c:05:
d1:1f:0b:99:cf:f9:5c:9d:bb:7f:e2:19:e6:2f:66:bd:9c:27:
c1:ea:e6:87:34:eb:ed:03:e6:71:e1:cf:4b:8d:7d:8e:f8:be:
28:45:40:1b:03:41:ff:bd:c8:c4:3c:69:2d:5d:14:a5:fe:28:
cb:9c:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:39 2025 by rpki-client